Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
File:                     2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa (raw, json)
Hash identifier:          qbsGu+aov2zYa4TFzdO4rkvhEp+yLzKt81F6FUMLxqU=
Subject key identifier:   A0:ED:D8:B1:E6:32:4F:64:ED:9F:2D:56:45:BE:9F:B3:06:4C:52:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA05497F2B59B1532CA6B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100d:b0ca::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:05:49:7f:2b:59:b1:53:2c:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=82e320e2-ce7e-4445-89f2-9f1336294238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:4a:6c:65:e5:29:dd:6f:e8:ff:b4:2c:c4:
                    89:59:31:46:bf:03:17:89:59:89:cb:02:ad:4e:7e:
                    07:75:65:50:57:2c:c1:b1:50:07:dd:91:ad:c0:23:
                    9d:f9:30:52:21:fb:96:a7:a5:d8:10:d7:b3:3c:e4:
                    c5:54:f5:44:ea:3c:09:09:7f:d9:3e:ae:8f:0a:ae:
                    4b:0d:21:5e:1e:48:45:7b:be:6f:d3:c0:b3:7b:58:
                    a1:87:23:96:3b:7d:25:ad:a7:2c:f2:c4:08:f8:e7:
                    93:9c:fb:a3:fd:e3:dc:fe:96:46:1e:fa:2b:f8:7e:
                    21:e5:0a:ec:d4:7a:a1:38:d2:0b:df:cd:28:4e:35:
                    e6:f1:c3:5b:f1:47:a4:fe:75:82:a2:18:70:29:76:
                    27:a9:ab:bf:57:99:1c:b4:8f:3b:69:36:6b:b2:13:
                    8d:d6:ff:85:ed:4b:1d:64:f4:4c:bf:db:5e:69:65:
                    3d:ad:c3:6b:33:cc:45:44:57:fe:06:2a:75:e4:6e:
                    54:e9:9a:cf:a0:6b:7a:08:43:76:f0:7c:f9:04:3f:
                    e2:01:ab:6f:34:c2:0b:09:20:ef:04:c8:44:f0:96:
                    9f:56:65:fb:5e:c1:2e:1b:73:af:c6:f4:f9:d4:a1:
                    a2:f1:29:f7:24:57:1f:88:ab:80:c2:20:a8:28:b6:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:ED:D8:B1:E6:32:4F:64:ED:9F:2D:56:45:BE:9F:B3:06:4C:52:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0ca::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:23:d8:f2:49:f4:a2:bc:e6:3a:73:e9:a9:3e:31:5c:84:4e:
         61:9c:93:85:f5:17:b4:53:70:6b:ca:89:1f:a5:bc:16:da:95:
         54:1e:22:49:fe:04:4d:ac:d1:bc:89:0f:0d:2c:31:d4:fe:c2:
         84:28:f7:88:83:06:9c:2e:84:90:7b:e9:cb:d5:bc:67:cf:a2:
         a1:12:fd:4e:bc:29:a1:39:7a:ac:da:9b:62:db:aa:5b:94:88:
         5f:05:bb:5c:57:75:2c:61:21:0e:e4:07:f3:59:09:98:07:4e:
         39:d7:73:01:06:15:6f:92:8c:af:a9:bb:44:8c:1a:16:eb:1a:
         f8:9f:f9:27:4a:20:d5:b5:bb:25:49:4c:a9:b2:cd:3a:d0:72:
         58:2d:94:b1:01:4c:41:52:eb:2b:da:93:8f:b6:b5:e7:95:7d:
         ae:1a:2a:f4:9d:b3:19:80:ab:1a:08:18:98:cc:43:d1:6f:25:
         1c:4a:fb:bc:c9:9d:a5:3c:e4:2c:41:55:b5:ff:3e:4c:84:92:
         38:85:82:b2:fc:55:d0:cd:a9:09:2f:75:eb:90:3c:2a:0a:93:
         a9:25:3f:e9:9b:7f:72:c7:5a:1d:0c:8c:31:de:b8:28:d6:0f:
         64:90:0a:15:69:39:77:bc:bb:fc:2c:1e:28:82:55:b3:79:c6:
         8b:21:13:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqgVJfytZsVMsprAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
ODJlMzIwZTItY2U3ZS00NDQ1LTg5ZjItOWYxMzM2Mjk0MjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrdKbGXlKd1v6P+0LMSJWTFGvwMXiVmJywKt
Tn4HdWVQVyzBsVAH3ZGtwCOd+TBSIfuWp6XYENezPOTFVPVE6jwJCX/ZPq6PCq5L
DSFeHkhFe75v08Cze1ihhyOWO30lracs8sQI+OeTnPuj/ePc/pZGHvor+H4h5Qrs
1HqhONIL380oTjXm8cNb8Uek/nWCohhwKXYnqau/V5kctI87aTZrshON1v+F7Usd
ZPRMv9teaWU9rcNrM8xFRFf+Bip15G5U6ZrPoGt6CEN28Hz5BD/iAatvNMILCSDv
BMhE8JafVmX7XsEuG3OvxvT51KGi8Sn3JFcfiKuAwiCoKLb7LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKDt2LHmMk9k7Z8tVkW+n7MGTFJeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmRiNjhjZTktNzc4NS0z
ZTQ5LTllZDUtZDAwZWEwNDIyM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEcj2PJJ9KK85jpz6ak+MVyETmGck4X1F7RTcGvKiR+lvBbalVQe
Ikn+BE2s0byJDw0sMdT+woQo94iDBpwuhJB76cvVvGfPoqES/U68KaE5eqzam2Lb
qluUiF8Fu1xXdSxhIQ7kB/NZCZgHTjnXcwEGFW+SjK+pu0SMGhbrGvif+SdKINW1
uyVJTKmyzTrQclgtlLEBTEFS6yvak4+2teeVfa4aKvSdsxmAqxoIGJjMQ9FvJRxK
+7zJnaU85CxBVbX/PkyEkjiFgrL8VdDNqQkvdeuQPCoKk6klP+mbf3LHWh0MjDHe
uCjWD2SQChVpOXe8u/wsHiiCVbN5xoshEx8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:18 2024 by rpki-client on console-ams.rpki-client.org